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RB MARKS 

The Examiner has rejected Claims 1-16 under 35 U.S.C 101 as being directed 
toward non -statutory subject matter. Applicant has clarified Claim 1 to include a 
computer program product "embodied on a tangible computer readable medium" in order 
to avoid such rejection. 

The Examiner has rejected Claims 1, 3-6, 8-16, 17, 19-22, 24-32, 33, 35-38, and 
40-47 under 35 U.S.C. 103(a) as being unpatentable over Nambu (U.S. Patent Publication 
No, 2002/0124182), in view of Hershberg et ai. (U.S. Patent Publication No. 
2003/0022657). Applicant respectfully disagrees with such rejection. 

With respect to the independent claims, the Examiner has relied on the following 
excerpts from the Nambu reference to make a prior art showing of applicant's claimed 
"identifying one or more classes of malware threat against which said mobile computing 
device is to be protected" (see this or similar, but. not necessarily identical language in the 
independent claims). 

■'In accordance with the circumstances under which viruses are 
generated, the ir-ainteoan.ee server 4). registers and met) ages due 
i ii l - ypes t viruses. 

us name, danger level, discovery 
vaccine manufacture schedule} , 
le name (pattern number} . The 
c 1 r < ; r i 1 1 < d /a 
i and pattern data files that are 
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More specifically, the Examiner asserts that, "it is known within existing malware 
definition data to include information thai .• a >si 1 .• the malware items using classes.'" 
However, applicant respectfully disagrees and notes that the above excerpts relied on by 
the Examiner merely teach that a maintenance sen ei RgisK . anages u 
information of new types of viruses" and that vt [t]he maintenance server. . . receives and 
stores updated vaccine software (including scan engines) and pattern data files" 
i r ■ ' graph [0072] emphasis added). Further, the excerpts teach that "support 
computers. . . of the vaccine software makers may upload vaccine software and pattern 
files to the m ai nten anee server ' and that [t]he maintenance server. . . is connected to 
various user terminals" (paragraphs [0073]-[0074] - emphasis added). 

However, registering and managing new virus types, receiving and storing 
updated vaccine software and pattern data files, and uploading vaccine software to a 
server which is connected to user terminals, as in Nambu. does not teach " identifying one 
or more classes of malware threat agiinst which said mobile computing de\ ice is 10 be 
protected" (emphasis added), as claimed by applicant. Additionally, it appears that the 
Examiner has relied on an inherency argument regarding the above emphasized claim 
limitations. In view of the arguments made hereinabove, any such inherency argument 
has been adequately rebutted, and a notice of allowance or a specific prior art showing of 
such claim features, in combination with the remaining claim elements is respectfully- 
requested (See MPEP 2 1 1 2). 

Additionally, with respect to the independent claims, the Examiner has relied on 
the following excerpts from the Nambu reference to make a prior art showing of 
applicant's claimed "generating from said master malware definition data said mobile 
computing device malware definition data, said mobile computing device malware 
definition data identifying items of malware identified within said master malware 
definition data which are within classes of malware threat against which said mobile 
computing device is to be protected" (see this or similar, but not necessarily identical 
language in the independent claims). 



The new an ti -virus processing program 51 includes a new virus 
information processing program 51a arid a user information 
, > ess i p ) i 

as a new virus countering iiiformatiori memory end stores; vaccine 
* v i ' . , . . iias b*<ss 

been pro;i = . •:>-', of virus for which a vaccii 

nclu i 5f othi 

Applicant respectfully points out that the above excerpts relied on by the 
Examiner merely teach that a "maintenance server. . . stores information related to the 
user terminals" and "provides ihe terminals. . . with updated vaccine software and pattern 
files" (emphasis added). Additionally, the excerpts teach that "|t]he maintenance server 
4i stores vaccine software e,d .pattern Hies (emphasis added). Further, the excerpts 
teach that "jtjhe fust information file . . . functions as a new virus countering information 
memory and stores vaccine software information " and that "ft)he second information 
fik stores the pi conditio ne user tenrsinar (emphasis added) 

However, merely storing vaccine software and pattern tiles and information, in 
addition to storing the present condition of a user terminal, as in Nambu, fails to disclose 
"generating from said master malware definition data said mobile computing device 
malware definition data, said mobile computing device malware definition data 
identifying items of malware identified within said master malware definition data which 

ith ssj f n e threat gains 4ticl c no! le cornp sting h t to [ 

protected" (emphasis added), as claimed by applicant. Clearly, merely storing pattern 
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files and information, as in Nanibu, simply fails to even suggest "classes >f o alv are 
threat against which said mobile computing device is to be protected" (emphasis added), 
in the manner as claimed by applicant. 

Further, with respect to the independent claims, the Examiner has relied on 
paragraphs [0074], [0075], and [0077] from the Nambu reference (reproduced above) to 
make a prior art showing of applicant's claimed technique "wherein said fixed location 
computing device stores profile data identifying one or more different types of mobile 
computing device to which said fixed location computing device transfers computer files 
and corresponding threat data identifying one or more classes of mahvare threat to which 
each of said mobile computing devices is vulnerable" (see this or similar, but not 
necessarily identical language in the independent claims). 

Applicant respectfully notes that the above reference excerpts relied on by the 
Examiner merely disclose that "[t]he maintenance server. . . is connected to various user 
terminals'' (paragraph [0074] - emphasis added), that "[tjhe maintenance sewer 41 stores, 
information related to the user terminals" (paragraph [0075] -• emphasis added), and that 

"[t]he maintenance server,., stores vaccine software and pattern files that are received 

from the vaccine software makers" (paragraph [0077] - emphasis added). 

However, merely storing information related to user terminals, in addition to 
storing vaccine software and pattern files, as in Nambu, fails to teach a technique 
"wherein said fixed location computing device stores profile data identifying one or more 
different types of mobile computing device to which said fixed location computing 
device transfers computer files and corresponding threat data identifying one or more 
classes of malware threat to which each of said mobile computing devices is vulnerable" 
(emphasis added), as claimed by applicant Clearly, storing information relating to user 
terminals and providing updated vaccine software and pattern files, as in Nambu, simply 
fails to suggest " transferring] computer files and corresponding threat data identifying 
one or more classes of mahvare threat to which each of said mobile computing devices is 
vulnerable" (emphasis added), as claimed by applicant. 
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Further still, with respect to the independent claims, the Examiner has relied on 
i s), in addition to the following excerpts, from the 

Nambu reference to make a prior art showing of applicant's claimed technique "wherein 
said one or more classes of maiware threat against which said mobile computing device is 
to be protected are chosen according to classes of maiware threat known to pose a 
problem to said mobile computing device, and classes for which it is desired to protect 
said mobile computing device according to user defined policies" (see this or similar, but 
not necessarily identical language in the independent claims). 



"The i v t ' 1 - ib ' t > i 

3eftware :: relatroi irif or ma tier; from -he second inf creation file 54 

via S:i:;e user i nf or mat ion process;;:! rig program 51b. The processing 

> -T the 

fir;;;;, information file 53 via the new virus intornBtion 
processing program 51a." (paragraph [0081] - emphasis added) 




t - - s > 3 nl ( - ; t ;e; ~ v - 1 a; ed 

t 1 1 < c ; ui co 

distribution program 52 distributes tc the user terminals 45a 
45d, vaccine software and pattens files (including that of other 
makers) that have been updated to counter the new virus," 
{paragraph £8108] - emphasis added) 



Applicant respectfully points out that the above excerpts relied on by the 
Examiner merely disclose that "[t]he first information file . . . functions as a new vims 
countering information memory atic esvacci > i n ni rn ion and that [tjht 
second information file... stores the present condition of the user terminal" (paragraph 
[0078] - emphasis added). Additionally, the above excerpts teach that the "new anti-virus 
processing program. . . acquires the vaccine software-related information" as well as "new- 
virus countering information." Further, the excerpts teach that "ft]he maintenance 
server. . . determines wither the vaccine, spftware.and pattern data fifes presently used 
are capable o untt jg a new vims" and that "[b]ased on the determination, the 
resource distribution program. . . distributes to the user terminals vaccine software and 
pattern files. . . that have been updated to counter the new virus" {emphasis added). 
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However, merely acquiring vaccine and virus countering information, 
determining whether a vaccine is capable of countering a new virus;, and distributing 
vaccine software based on the determination, as in N ambit, fails to suggest a technique 
"wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen \ c > li gj I ^ s > I ware th ij 
known to pose a problem to said mobile computing device, and classes for which it is 
desired to protect said mobile computing device accordii to ust ' fun policies 
(emphasis added), as claimed by applicant. Clearly, distributing vaccine software based 
on the determination if the vaccine is capable of countering a new virus, as in Nambu, 
simply fails to even suggest that "one or more el a sses of m al ware th re at . . . are chosen 
according to classes of malware threat known top. ?t \ pj )bk>! o said mobile 
computin g device " (emphasis added), in the manner as claimed by applicant. 

To establish & prima facie case of obviousness, three basic criteria must be met. 
First, there must be some suggestion or motivation, either in the references themselves or 
in the knowledge generally a vailable to one of ordinary ski ll in the art, to modify the 
reference or to combine reference teachings. Second, there must be a reasonable 
expectation of success. Finally, the prior art reference (or references when combined) 
must teach or suggest all the claim limitations. The teaching or suggestion to make the 
claimed combination and the reasonable expectation of success must both be found in the 
prior art and not based on applicant's disclosure. In re Faeck,941 F.2d 488, 20 USPQ2d 
1438 (Fed.Cir. 1991). 

Applicant respectfully asserts that at least the third element of the prima facie 
case of obviousness has not been met, since the prior art. references, as relied upon by the 
Examiner, fail to teach or suggest all of the claim limitations, as noted above. 

Applicant further notes that the prior art is also deficient with respect to the 
dependent claims. For example, with respect to Claim 4 et al., the Examiner has relied on 
paragraphs [0074], [0075], and [0077] from the Nambu reference (reproduced above) to 
make a prior art showing of applicant's claimed technique "wherein, when said mobile 
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computing device is connected to said fixed location computing device, different versions 
of user generated computer files respectively stored by said mobile computing device and 
said fixed location computing device are synchronized." 

Applicant respectfully notes that the above excerpts relied on by the Examiner 
merely teach that a "maintenance server. . . is connected to various user terminals" and 

that "[tjhe maintenance server. . . stores information related to the user terminals and, 

based on the user-related information, provides the terminals. . . with updated vaccine 
software" (paragraph [0074]}. Also, the above excerpts teach that "[tjhe maintenance 
server. . . stores vaccine software and pattern files. . . that are received from the vaccine 
software makers" (paragraph [0077] - emphasis added). 

However, merely teaching that a maintenance server is connected to user 
terminals, stores vaccine tiles received from vaccine software makers, and provides the 
terminals with updated vaccine software, as in Nambu, fails to suggest a technique 
"wherein, when said mobile computing device is connected to said fixed location 
computing device, different versions of user generated computer files respectively stored 
by said mobile computing device and said fixed location computing device are 
synchronized " {emphasis added), as claimed by applicant. Clearly, vaccine flies received 
from vaccine. so fiware„ markers, as in Nambu, simply fails to even suggest that "different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are synchronized" (emphasis added), as 
claimed by applicant. 

Additionally, with respect to Claim 8 et al, the Examiner has relied on the 
following excerpt from the Nambu reference to make a prior art showing of applicant's 
claimed technique "wherein user controlled policy data is used in combination with said 
threat data to control against which classes of malware threat said mobile computing 
device is protected by said mobile computing device malware definition data." 

"When vacciiis soiitwars i;sad by t:be prsse tj nnecLed use? 

terminal does not correspond to the new virus and the user wishes 
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*■ software i t 

foj sm iing vacc ie s --,=5-- - OI e 8{ jj 5 - the new vis s t 
tre 1 ten 1 " ' a - ^ 

Applicant respectfully notes that the above excerpt relied on by the Examiner 
meids discloses that ' [wjhen the vaeane - by the presently connected user 

terminal does not correspond to the new virus and the user wishes to constantly update 
the vaccine software" the "anti-vims processing program . . . provides the resource 

distribution program with information for sending vaccine software corresponding to 

the ncv\ virus to (be u ;< t errninal (emphasis added). 



However, the mere disclosure of the user wishing to constantly update the vaccine 
software, in addition to the resource distribution program sending vaccine software to the 
user terminal, as in Nambu, does not teach a technique "wherein user controlled policy 
lata is used in combination with said tin eat data to control ag 1 
malware threat said mobile computing device is protected by said mobile computing 
device malware definition data" (emphasis added), as claimed by applicant. Clearly, 
sending vaccine software to the user terminal when the vaccine software used by the user 
terminal does n 1 < re pi id to u u } rus as in Nambu, simply fails to even suggest 
"control [ling] against which classes of malware threat said mobile computing device is 
protected " (emphasis added), in the manner as claimed by applicant. 

Again, applicant respectfully asserts that at least the third element of the prima 
facte case of obviousness has not been met, since the prior art references, as relied upon 
by the Examiner, fail to teach or suggest aM of the claim limitations, as noted above. 

Thus, a notice of allowance or specific prior art showing of each of the foregoing 
claim elements, in combination with the remaining claimed features, is respectfully 
requested. 

Still yet, applicant brings to the Examiner s attention the subject matter of new 
Claims 49-50 below, which are added for full consideration: 
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"wherein said one or more classes of malware threat against which said 
mobile computing device is to be protected ai e chosen ac c >r< lasses o 

malware threat known to pose a problem to an operating system of said mobile 
computing device" (see Claim 49); and 

"wherein at. least a portion of said mobile computing device malware 
definition data poses a problem only to said mobile computing device and not to 
said fixed location computing device" (see Claim 50). 

Again, a notice of allowance or a proper prior art showing of all. of applicant's 
claim limitations, in combination with the remaining claim elements, is respectfully 
requested. 

Thus, all of the independent claims are deemed allowabl e. Moreover, the 
remaining dependent claims are further deemed allowable, in view of their dependence 
on such independent claims. 

In the event a telephone conversation would expedite the prosecution of thi s 
application, the Examiner may reach the undersigned at (408) 505-5100. The 
Commissioner is authorized to charge any additional fees or credit any overpayment to 
Deposit Account No. 50-1351 (Order No. NAT I P482). 

Respectfully submitted., 
Zilka-Kotab, PC. 

/KEV1NZILKA/ 

Kevin J. Ziika 

P.O. Box 72 11 20 Registration No. 4 1 ,429 

San Jose, C A 95172-1120 
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